Table 11. System setup options—Security menu (continued)
Security
By default, the Attestation Enable option is enabled.
Key Storage Enable Enables to control whether the Trusted Platform Module (TPM) Storage
Hierarchy is available to the operating system.
By default, the Key Storage Enable option is enabled.
SHA-256 When enabled, the BIOS and TPM will use the SHA-256 hash algorithm to
extend measurements into the TPM PCRs during BIOS boot.
By default, the SHA-256 option is enabled.
Clear Enables to clear the TPM owner information and returns the TPM to the
default state.
By default, the Clear option is disabled.
PPI Bypass for Clear Commands Controls the TPM Physical Presence Interface (PPI).
By default, the PPI ByPass for clear Commands option is disabled.
Chassis Intrusion This feature controls the chassis intrusion feature
By default, the Chassis Intrusion option is disabled.
SMM Security Mitigation Enable or disable additional UEFI SMM Security Mitigation protections.
By default, the option is enabled.
Data Wipe on Next Boot
Start Data Wipe Enable or disable the data wipe on next boot.
By default, the Start Data Wipe option is disabled.
Absolute Enable or disable or permanently disable the BIOS module interface of the
optional Absolute Persistence Module service from Absolute software.
By default, the option is enabled.
WARNING: The 'Permanently Disabled' option can only be
selected once. When 'Permanently Disabled' is selected, Absolute
Persistence cannot be re-enabled. No further changes to the
Enable/Disable states are allowed.
NOTE: The Enable/Disable options will be unavailable while Computrace is
in the activated state.
UEFI Boot Path Security Controls whether the system will prompt the user to enter the admin password
(if set) when booting to a UEFI boot path device from the F12 boot menu.
By default, the Always Except Internal HDD option is enabled.
Clear Firmware Device Tamper
Detection
By default, the Clear Firmware Device Tamper Detection option is selected
as OFF.
Table 12. System setup options—Passwords menu
Passwords
Admin Password Set, change, or delete the administrator password.
System Password Set, change, or delete the system password.
M.2 PCIe SSD-0 Set, change, or delete the M.2 PCIe SSD-0 password.
Password Configuration
Upper Case Letter Reinforces password must have at least one upper case letter.
By default, the option is disabled.
BIOS setup 83
To Next Page
Loading...
